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Claim Objections 

1 . Claim 5-6 & 9-10 are objected to under 37 CFR 1 .75 as being a substantial duplicate of 
claims. Claim 5 appears to be a duplicate of claim 6. Claim 9 appears to be a duplicate of claim 
10. When two claims in an application are duplicates or else are so close in content that they both 
cover the same thing, despite a slight difference in wording, it is proper after allowing one claim 
to object to the other as being a substantial duplicate of the allowed claim. See MPEP 

§ 706.03(k). 

Claim Objections 

2. Claims 23-27 are objected to as being dependent upon a rejected base claim, but would 
be allowable if rewritten in independent form including all of the limitations of the base claim 
and any intervening claims. 

Claim Rejections - 35 USC § 102 

3. The following is a quotation of the appropriate paragraphs of 35 U.S. C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public use or on 
sale in this country, more than one year prior to the date of application for patent in the United States. 

4. Claims 1, 14, & 21-22 are rejected under 35 U.S. C. 102(B) as being anticipated by Iyer 
(U.S. Patent No.; 6,944,183). 

Referring to claim 1, Iyer teaches: A method for assigning routing policy to a plurality of sites of 
a VPN per col. 4 line 1-col. 5 line 28 or per col. 1 lines 65-col. 2 line 52 or provisioning. The 
administrator graphically defines the relationship between the sides of the VPN per col. 4 line 1- 
col. 5 line 28. The administrator assigns the sites to policies one of which defines them as a part 
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of a RIPvl or RIPv2 network or routing network. RIPvl and RIPv2 inherently have at least one 

routing rule. 

In addition Iyer teaches: 

Regarding claim 14, policies are stored in the central database per Abstract or per col. 8 lines 65- 
67. 

Referring to claim 21, Iyer teaches: A method for assigning routing policy to a plurality of sites 
of a VPN per col 4 line 1-col. 5 line 28 or per col. 1 lines 65-col. 2 line 52 or provisioning. The 
administrator graphically displays at least one VPN component per Fig 7. Fig 7 enables 
dragging a representation of at least one site of a plurality of sites toward at least one VPN 
component. Fig 7 enables dropping of said representation of said at least one site on said 
representation of said at least one VPN component thereby causing said site to become a member 
of said VPN component 

The administrator assigns the sites to policies one of which defines them as a part of a RIPvl or 
RIPv2 network or routing network per col. 12 lines 20-38. RIPvl and RIPv2 inherently have at 
least one routing rule. 
In addition Iyer teaches: 

Regarding claim 22, policies are stored in the central database per Abstract or per col. 8 lines 65- 
67. 

Claim Rejections - 35 USC §103 
5. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
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having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

6. Claims 2-1 1 are rejected under 35 U.S.C. 103(a) as being unpatentable over Iyer (U.S. 

Patent No.: 6,944,183) in view of Zaummen (U.S. Patent No.: 5,881,243) 

Referring to claim 2, Iyer teaches: the method of claim 1, Iyer does not expressly call for: 

wherein generating at least one routing rule comprises: automatically generating at least one 

import rule, automatically generating at least one local export rule, and automatically generating 

at least one remote export rule but teaches that routing protocol RIP is assigned per col. 12 lines 

20-38 

Zaummen teaches: RIP sends import and export messages per col. 2 lines 1-23 and col. 9 lines 
46-67. RIP inherently has rules regarding import and export of routes regardless of whether they 
are local or remote per col. 12 lines 20-38. 

It would have been obvious to one of ordinary skill in the art at the time of the invention to add 
import and export messages of Zaummen to the RIP of Iyer in order to be standards compatible. 

Referring to claim 3, Iyer teaches: the method of claim 1, Iyer does not expressly call for: 
wherein automatically generating at least one routing rule for each site comprises generating an 
import rule for discarding route information received from the respective site but teaches that 
routing protocol RIP is assigned per col. 12 lines 20-38 

Zaummen teaches: RIP sends import and export messages per col. 2 lines 1-23 and col. 9 lines 
46-67. RIP inherently has rules regarding import and export of routes and discarding routes 
regardless of whether they are local or remote per col. 12 lines 20-38 or wherein automatically 
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generating at least one routing rule for each site comprises generating an import rule for 
discarding route information received from the respective site 

It would have been obvious to one of ordinary skill in the art at the time of the invention to add 
import and export messages of Zaummen to the RIP of Iyer in order to be standards compatible. 

Referring to claim 4, Iyer teaches: the method of claim 1, wherein automatically generating at 
each one routing rule that the site utilizes RIP comprises generating for a site of said plurality of 
sites, an RIP rule for accepting route information, in response to said site being a member of a 
mesh VPN component, receiving from any site of said plurality of sites which is a member of 
said VPN component per col. 12 lines 20-38. Iyer does not expressly call for: import rule 
Zaummen teaches: RIP sends import per col. 2 lines 1-23 and col. 9 lines 46-67. RIP inherently 
has rules regarding import of routes received from the respective site 

It would have been obvious to one of ordinary skill in the art at the time of the invention to add 
import messages of Zaummen to the RIP of Iyer in order to be standards compatible. 

Referring to claims 5 & 6, Iyer teaches: the method of claim 1, wherein automatically generating 
at each one routing rule that the site utilizes RIP comprises generating for a site of said plurality 
of sites, an RIP rule for accepting route information, in response to said site being a member of a 
mesh VPN component, receiving from any site of said plurality of sites which is a member of 
said VPN component regardless of whether the configuration is hub and spoke per col. 12 lines 
20-38. Iyer does not expressly call for: import rule 
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Zaummen teaches: RIP sends import per col. 2 lines 1-23 and col. 9 lines 46-67. RIP inherently 
has rules regarding import of routes received from the respective site 

It would have been obvious to one of ordinary skill in the art at the time of the invention to add 
import messages of Zaummen to the RIP of Iyer in order to be standards compatible. 

Referring to claim 7, Iyer teaches the method of claim 1, wherein automatically generating at 
least assigning one routing protocol or routing rule per col. 12 lines 20-38. Iyer does not 
expressly call for: export rule wherein the number of local export rules generate is at least equal 
to the number of VPN components of said VPN that the respective site is a member 
Zaummen teaches: RIP sends export messages per col. 2 lines 1-23 and col. 9 lines 46-67; 
therefore, assignment of RIP inherently assigns export rules. It would have been obvious to one 
of ordinary skill in the art at the time of the invention that there would be an export rule for each 
VPN respectively. 

It would have been obvious to one of ordinary skill in the art at the time of the invention to add 
export messages of Zaummen to the RIP of Iyer in order to be standards compatible. 

Referring to claim 8, Iyer teaches the method of claim 1, wherein automatically generating at 
least assigning one routing protocol or routing rule per col. 12 lines 20-38 and 102 per Fig 1 is 
one site and 104 per Fig 1 is a second site provider edge -customer edge routers share RIP 
information. They both accept and advertise or generate RIP routes associated with the VPN 
member devices regardless of whether they mesh. 
Iyer does not expressly call for: local export rule 
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Zaummen teaches: RIP sends export messages regardless whether the site is remote or local per 
col. 2 lines 1-23 and col. 9 lines 46-67; therefore, assignment of RIP inherently assigns local 
export rules. It would have been obvious to one of ordinary skill in the art at the time of the 
invention to add export messages of Zaummen to the RIP of Iyer in order to be standards 
compatible. 

Referring to claims 9 & 10, Iyer teaches the method of claim 1, wherein automatically generating 
at least assigning one routing protocol or routing rule per col. 12 lines 20-38 and 102 per Fig 1 is 
one site and 104 per Fig 1 is a second site provider edge -customer edge routers share RIP 
information. They both accept and advertise or generate RIP routes associated with the VPN 
member devices regardless of whether they hub-spoke 
Iyer does not expressly call for: local export rule 

Zaummen teaches: RIP sends export messages regardless whether the site is remote or local per 
col. 2 lines 1-23 and col. 9 lines 46-67; therefore, assignment of RIP inherently assigns local 
export rules. It would have been obvious to one of ordinary skill in the art at the time of the 
invention to add export messages of Zaummen to the RIP of Iyer in order to be standards 
compatible. 

Referring to claims 9 & 10, Iyer teaches the method of claim 1, wherein automatically generating 
at least assigning one routing protocol or routing rule per col. 12 lines 20-38 and 102 per Fig 1 is 
one site and 104 per Fig 1 is a second site provider edge -customer edge routers share RIP 
information. They both accept and advertise or generate RIP routes associated with the VPN 
member devices regardless of whether they VPN component 
Iyer does not expressly call for: local export rule 
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Zaummen teaches: RIP sends export messages regardless whether the site is remote or local per 
col 2 lines 1-23 and col. 9 lines 46-67; therefore, assignment of RIP inherently assigns local 
export rules. It would have been obvious to one of ordinary skill in the art at the time of the 
invention to add export messages of Zaummen to the RIP of Iyer in order to be standards 
compatible. 

7. Claims 12-13 are rejected under 35 U.S.C. 103(a) as being unpatentable over Iyer (U.S. 
Patent No.: 6,944,183) in view of Rekhter (U.S. Patent No.: 6,339,595) 
Referring to claim 12, Iyer teaches the method of claim 1, wherein automatically generating at 
least assigning one routing protocol or routing rule per col. 12 lines 20-38 and 102 per Fig 1 
Iyer does not expressly call for: generating a remote export rule for not advertising routin 
information received form a site which is a member of a VPN component to a site which is not a 
member of said VPN 

Rekhter teaches: router in a VPN may be assigned to advertise intra-VPN traffic and not to 
advertise intra- VPN traffic per col. 18 lines 59-67 or generating a remote export rule for not 
advertising routin information received form a site which is a member of a VPN component to a 
site which is not a member of said VPN 

It would have been obvious to one of ordinary skill in the art at the time of the invention to add 
the rules of Rekhter to the method of Iyer in order to limit the traffic between VPNs. 
Referring to claim 13, Iyer teaches the method of claim 1, wherein automatically generating at 
least assigning one routing protocol or routing rule per col. 12 lines 20-38 and 102 per Fig 1 
Iyer does not expressly call for: routing rule for each site comprises a generating for a site of 
said plurality of sites in response to said site being a member of at least two VPN components, a 
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remote export rule for advertising route information received from a site which si a mber of a 
first VPN component of said at least two VPN components to at least one site which is not a 
member of said first VPN component. 

Rekhter teaches: router in a VPN may be assigned to advertise intra- VPN traffic and not to 
advertise intra- VPN traffic per col. 18 lines 59-67 or routing rule for each site comprises a 
generating for a site of said plurality of sites in response to said site being a member of at least 
two VPN components, a remote export rule for advertising route information received from a site 
which si a mber of a first VPN component of said at least two VPN components to at least one 
site which is not a member of said first VPN component. 

It would have been obvious to one of ordinary skill in the art at the time of the invention to add 
the rules of Rekhter to the method of Iyer in order to limit the traffic between VPNs. 

8. Claim 15 are rejected under 35 U.S.C. 103(a) as being unpatentable over Giniger (U.S. 
Patent No.: 6,751,729) in view of Arquie (U.S. Patent No.: 6,880,127) 

Referring to claim 15, Giniger teaches a Manager management Server per Fig 7 or system for 
provisioning a routing policy to a plurality of sites of a virtual private network. Giniger does not 
expressly call for: a graphical user interface but teaches a Management server for configuring the 
network per Fig 7. Arquie teaches display graphically displaying two nodes in which are 
components of a network per Figs 1 A- IE and per col. 1 lines 27-col. 2 lines 29 and per Col. 2 line 
49-col 3 line 67. The display area or customer area shows two sites which upon dragging the 
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cursor from one node to the other node and dropping defines a route between the two nodes 
which makes it a member of the network of VPN. 

It would have been obvious to one of ordinary skill in the art the time of the invention to add the 
display unit of Arquie to the management server of Giniger in order to assign nodes to the 
network in an efficient manner. 

rules of Rekhter to the method of Iyer in order to limit the traffic between VPNs. 

9. Claims 16-20 are rejected under 35 U.S.C. 103(a) as being unpatentable over Giniger 
(U.S. Patent No.: 6,751,729) in view of Arquie (U.S. Patent No.: 6,880,127) further in view of 
Iyer (U.S. Patent No.: 6,944,183) 

Referring to claim 16, Gininger and Arquie teach: the system of claim 15. The combination of 
Gininger and Arquie do not expressly call for: further comprising means for automatically 
generating at least one routing rule for each site of said plurality of sites based at least in part on 
membership of said respective site. 

Iyer teaches: further comprising means for automatically generating at least one routing rule for 
each site of said plurality of sites based at least in part on membership of said respective site per 
Abstract or per col. 12 lines 20-38. 

It would have been obvious to one of ordinary skill in the art at the time of the invention to add 
assigning membership of Iyer to the system of Ginniger and Arquie in order to build a system 
which can assign a routing protocol on a VPN basis. 

Referring to claim 17, Gininger, Arquie, and Iyer teach: the system of claim 16. The 
combination of Gininger, Arquie, & Iyer do not expressly call for: further comprising means for 
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distributing said respective generating routing rule to a respective one of said plurality of sites of 
said VN component. 

Iyer teaches: further comprising means for distributing said respective generating routing rule to 
a respective one of said plurality of sites of said VN component per Fig 8. 
It would have been obvious to one of ordinary skill in the art at the time of the invention to add 
display of Iyer to the system of Ginniger, Arquie, and Iyer in order to build a system which is 
user friendly for an administrator. 

Referring to claim 18, Gininger, Arquie, and Iyer teach: the system of claim 17. The 
combination of Gininger, Arquie, & Iyer do not expressly call for: further comprising means for 
processing by each site route information received from said plurality of sites based at least one 
said one routing rule generating for said respective site. 

Iyer teaches: means for processing by each site route information received from said plurality of 
sites based at least one said one routing rule generating for said respective site per Fig 8. 
It would have been obvious to one of ordinary skill in the art at the time of the invention to add 
display of Iyer to the system of Ginniger, Arquie, and Iyer in order to build a system which is 
user friendly for an administrator. 

Referring to claim 19, Gininger, Arquie, and Iyer teach: the system of claim 18. The 
combination of Gininger, Arquie, & Iyer do not expressly call for: further comprising means for 
establishing routing relations between said plurality of sites based at least in part on said 
processed routing information. 
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Iyer teaches: means for further comprising means for establishing routing relations between said 
plurality of sites based at least in part on said processed routing information, per Fig 8. 
It would have been obvious to one of ordinary skill in the art at the time of the invention to add 
display of Iyer to the system of Ginniger, Arquie, and Iyer in order to build a system which is 
user friendly for an administrator. 

Referring to claim 20, Gininger, Arquie, and Iyer teach: the system of claim 15. The 
combination of Gininger, Arquie, & Iyer do not expressly call for: further comprising a database 
operable to store said at least one routing rule. 

Iyer teaches: routing policies or rules are stored in the central database per Abstract or per col. 8 
lines 65-67. 

It would have been obvious to one of ordinary skill in the art at the time of the invention to add 
the routing data base of Iyer to the system of the Gininger, Arquie, and Iyer in order to store the 
system configuration values. 

Conclusion 

10. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Robert W. Wilson whose telephone number is 571/272-3075. 
The examiner can normally be reached on M-F (8:00-4:30). 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Chau T. Nguyen can be reached on 571/272-3 126. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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